This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/1yFoGNscUr4CLW6dqLRm33BUYvg.roa File: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (raw, json) Hash identifier: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4= Subject key identifier: D7:21:68:18:DB:1C:52:BE:02:2D:6E:9D:A8:B4:66:DF:70:54:62:F8 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E73A53FE6C0B0ADD528218C8DF6B Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/1yFoGNscUr4CLW6dqLRm33BUYvg.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35007 IP address blocks: 93.105.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e7:3a:53:fe:6c:0b:0a:dd:52:82:18:c8:df:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7216818db1c52be022d6e9da8b466df705462f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:63:f0:7d:c9:03:bd:f9:a4:ad:9f:8d:58: 9b:e6:79:c5:85:21:24:65:49:59:ed:0f:e8:85:25: cc:3c:1d:6c:3e:db:92:2a:0a:70:88:74:70:4f:9e: 2c:61:8b:c7:0e:9c:fb:7c:00:58:a7:22:10:1c:be: 0f:e1:2a:9a:ee:16:6c:82:69:10:45:76:97:f6:51: d0:7a:8e:9e:09:6f:1f:61:ca:25:9a:a0:66:5a:63: 73:21:2c:c4:22:96:3d:a7:f5:a9:8e:d8:75:d5:9c: 87:4d:b4:0e:22:13:ee:7c:5a:8a:f8:9a:d5:19:60: 52:99:95:c2:33:31:65:c8:9b:6a:88:6a:26:3c:da: ce:94:76:14:cc:bd:26:6a:7b:9c:cc:76:a3:b0:cc: 5f:08:48:be:4a:bf:93:75:5a:f8:17:da:04:db:4f: 4f:02:80:ad:26:9d:23:a9:29:46:48:e5:9b:de:20: 8d:c0:2d:5a:a9:9d:61:fb:1f:62:05:1d:f5:16:c3: bb:9b:b2:a0:d8:e3:d5:2e:4a:8e:86:00:48:14:d5: a1:9c:ae:99:f7:a7:97:1e:fc:4d:b5:98:d2:3c:0f: 4c:39:0c:b0:8b:d5:62:8d:c9:e2:01:ec:e7:b4:24: a6:1d:0d:04:91:e0:73:43:a5:77:d4:ea:ed:0e:9b: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:68:18:DB:1C:52:BE:02:2D:6E:9D:A8:B4:66:DF:70:54:62:F8 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/1yFoGNscUr4CLW6dqLRm33BUYvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.105.74.0/24 Signature Algorithm: sha256WithRSAEncryption a0:33:73:2e:84:81:97:b2:23:8a:6e:3b:e9:f8:a4:2b:d6:a3: 1f:14:f2:56:00:ae:d8:2d:fd:5f:bd:e4:b3:f4:01:04:01:48: 68:49:4c:78:b9:86:30:53:ce:2b:e4:39:b0:d3:f0:08:ec:4e: f0:6e:ed:a7:77:82:29:15:4b:71:21:89:ca:3a:30:0f:33:23: a4:fc:bc:77:73:ee:c2:b2:80:5d:ec:61:f4:0e:17:8f:87:b2: a0:ce:2f:d7:c1:ca:a5:36:b9:d2:62:09:62:2a:3e:66:56:9f: 2f:39:2c:01:c7:59:65:5f:bd:8c:9b:5e:a6:4d:37:ad:5e:75: 61:d5:e9:93:65:08:dd:d8:13:f5:02:1f:93:9c:f3:ed:c8:6d: c3:0a:aa:2d:49:8c:d6:01:76:a3:1a:87:59:db:71:5b:d0:60: 2e:48:68:78:84:37:31:5b:5e:da:fa:e3:b5:cc:e7:1c:36:b9: dc:7f:5e:33:69:6d:00:72:bf:6d:9b:ed:72:00:b2:70:ff:64: 79:9a:9f:b8:ec:f2:9c:1c:23:1b:ed:24:63:9f:9f:d2:92:22: bf:1f:78:10:86:fb:14:17:53:be:51:ef:a2:26:9d:f0:43:8c: e5:f3:3b:47:b3:bf:9c:90:55:2b:92:ea:e8:e9:58:88:9d:5e: b8:13:df:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+c6U/5sCwrdUoIYyN9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzIxNjgxOGRiMWM1MmJlMDIyZDZlOWRhOGI0NjZkZjcwNTQ2MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Etj8H3JA735pK2fjVib5nnFhSEk ZUlZ7Q/ohSXMPB1sPtuSKgpwiHRwT54sYYvHDpz7fABYpyIQHL4P4Sqa7hZsgmkQ RXaX9lHQeo6eCW8fYcolmqBmWmNzISzEIpY9p/Wpjth11ZyHTbQOIhPufFqK+JrV GWBSmZXCMzFlyJtqiGomPNrOlHYUzL0manuczHajsMxfCEi+Sr+TdVr4F9oE209P AoCtJp0jqSlGSOWb3iCNwC1aqZ1h+x9iBR31FsO7m7Kg2OPVLkqOhgBIFNWhnK6Z 96eXHvxNtZjSPA9MOQywi9VijcniAezntCSmHQ0EkeBzQ6V31OrtDpuTIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNchaBjbHFK+Ai1unai0Zt9wVGL4MB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvMXlGb0dOc2NVcjRDTFc2ZHFMUm0zM0JVWXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXWlKMA0G CSqGSIb3DQEBCwUAA4IBAQCgM3MuhIGXsiOKbjvp+KQr1qMfFPJWAK7YLf1fveSz 9AEEAUhoSUx4uYYwU84r5Dmw0/AI7E7wbu2nd4IpFUtxIYnKOjAPMyOk/Lx3c+7C soBd7GH0DhePh7Kgzi/XwcqlNrnSYgliKj5mVp8vOSwBx1llX72Mm16mTTetXnVh 1emTZQjd2BP1Ah+TnPPtyG3DCqotSYzWAXajGodZ23Fb0GAuSGh4hDcxW17a+uO1 zOccNrncf14zaW0Acr9tm+1yALJw/2R5mp+47PKcHCMb7SRjn5/SkiK/H3gQhvsU F1O+Ue+iJp3wQ4zl8ztHs7+ckFUrkuro6ViInV64E98U -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:36 2026 by rpki-client